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(54) System and method for anonymous access to the Internet 

(57) A system and method for enabling an Internet 
user to anonymously access services offered by Inter- 
net content providers. The invention uses a proxy server 
operated by a proxy with whom the user, as a client of 
the proxy, has established a line of credit or has depos- 
ited funds. The client and proxy have also agreed upon - 
an alias for the client, and the proxy has provided the cli- 
ent an alias account code to use in purchasing over the 
internet merchandise from Internet content providers. 
The client uses a browser to access the Internet 
through the proxy. The proxy server communicates to 
the Internet, under the alias, all transactions originating 
with the client; and also receives ail transactions 
directed to the alias and communicates them to the cli- 
ent browser The proxy examines the transactions for 
the occurrence of the alias account code provided by 
the client to purchase merchandise from an Internet 
content provider, and when finding it, seeks to deter- 
mine whether the client has sufficient credit or funds for 
the proxy to guarantee payment for the merchandise. 
Depending on instructions from the client, the proxy will 
also receive the physical merchandise and make it 
available to the client according to the client's instruc- 
tions. 




Fig, 3 



CL 



Printed by Xerox (UK) Business SerA^ces 
2.16.7 (HRS)/3.B 



1 



EP 1 033 854 A2 



2 



Description 

[0001] The present invention pertains to accessing 
the Internet, and more particularly to accessing the 
Internet anonymously to carry out transactions includ- 
ing making purchases. 

[0002] Although communication over the Internet 
can be encrypted, the Internet is not a secure network. 
Unencrypted communications can be overheard, and 
when those communications convey confidential infor- 
mation, there is the potential for harm. 
[0003] But regardless of whether a communication 
is encrypted, the environment at an intended recipient 
of an Internet communication may not be secure, If an 
Internet user visits a site on the Internet, there is a 
chance that the information that the user visited the site 
will be made available to others or otherwise used by 
people at the site in ways the user would not approve. 
[0004] What is needed is a way for a user to visit a 
site on the Internet anonymously. But without paying, an 
Internet user cannot take advantage of all that is offered 
through an Internet site, such as access to information 
from a site, or the opportunity to order merchandise 
through the site! Thus, what is further needed is a 
means for rendering or ensuring payment over the Inter- 
net to the operator of an Internet site in a way that will be 
accepted by sites on the Internet, without revealing the 
identity of the user making the payment. 
[0005] Accordingly, it Is an object of the present 
invention to provide a means for an Internet user to visit 
sites on the Internet anonymously, to pay for merchan- 
dise made available through those sites anonymously, 
and to have the operator of an Internet site provide mer- 
chandise, services, funds, goods, information, etc., to a 
user without the operator learning the identity of the 
user who ordered the merchandise. To meet the above 
object, the present invention provides a system 
[0006] for enabling a client, using an alias, to 
access merchandise, services, funds, goods, informa- 
tion, etc. over the Internet offered by an Internet content 
provider (ICP) operating an ICP server, the system 
comprising: a) a browser hosted by a computer oper- 
ated by the client, for receiving graphical user interface 
(GUI) screens, and for communicating transactions indi- 
cated by the client, the transactions including informa- 
tion that allows the alias to be associated with the 
transactions; and b) a proxy server operated by a proxy, 
responsive to transactions, for ensuring that each trans- 
action is under tine alias and for communicating the 
transactions to the ICP over the Internet, and further 
responsive to GUI screens directed to the alias, for pro- 
viding the GUI screens to tiie browser. 

Fig. 1 is a block diagram showing an Internet con- 
nectivity architecture according to the present 
invention; 

Fig. 2 is a process flow diagram illustrating the prin- 
cipal interfaces of the present invention; and 



Fig. 3 is a data flow diagram illustrating various 
communications over the Internet, according to the 
present invention. 

5 [0007] Referring now to Fig. 1 . a client user 11 is 
shown operating a computer 12 executing an Internet 
browser application (not shown), but connected to a 
proxy server 18. instead of directly to an Internet service 
provider (ISP) to access the Internet. The proxy server 

10 18 is in turn connected to an ISP 15 to gain access to 
the Internet. (The proxy server 18 may itself be an iSP.) 
With this indirect connection to the Internet, the client 
user 1 1 gains indirect access to an Internet content pro- 
vider (ICP) server 16. The proxy server 18 is operated 

15 by a proxy 14. 

[0008] Referring now to Fig. 2. according to the 
present invention, to access sites on the Internet anon- 
ymously, tiie dient 11 of tiie proxy 14, in a step 31 . con- 
nects to the proxy server 18, providing proof of 

20 identification. As will be explained in more detail below, 
tiie client will have already established with the proxy a 
tine of credit or will have opened with the proxy an 
account holding funds, and will have provided other 
information needed for the proxy to provide its proxy 

25 services, also to be described in what follows. 

[0009] In connecting to the proxy, the client uses a 
pre-agreed-upon alias, an alias created when the client 
first established. with the proxy a line of credit or depos- 
ited funds with the proxy. In the preferred embodiment, 

30 the client will have deposited funds with the proxy, which 
the client could do anonymously. Alternatively, as indi- 
cated above, the client could establish with the proxy a 
line of credit, which would not be anonymous, however, 
the proxy could guarantee confidentiality of the data- 

35 base. Because of either an account with funds or a line 
of credit (e.g., a kind of charge card or credit card 
account), the client is said here to have a certain 
amount of purchasing power associated with an alias 
account having an alias account code. In one aspect of 

40 the present invention, the alias account code is a credit 
card number for a credit card issued by tiie proxy, or an 
agent of the proxy. But in all aspects of the present 
invention, there is an alias account code for a client 
account having a certain amount of purchasing power 

45 associated with an alias account maintained for the cli- 
ent by the proxy, or an agent of the proxy. 
[0010] The client computer and proxy server can 
communicate over many different kinds of networks, 
including the public telephone system, with many kinds 

so of protocols; tiie present invention is not intended to be 
restricted to any particular client conputer/ proxy server 
connection. For example, the proxy may provide each 
client with communication software for communicating 
over a telephone line with the proxy. In another embodi- 

55 ment. the client computer and proxy server can be con- 
nected over a local area networK and the proxy can use 
the operating system hosted by the local area network 
to communicate witii the client computer. 
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[0011] Once the client establishes a connection 
with the proxy server, in the preferred embodiment 
where the proxy server is not itself an ISP, in a step 32 
the proxy server 18 accesses the Internet, as the client 
alias, through an ISP server 1 5. Then the proxy server 
receives through the ISP server graphical user interface 
(GUI) screens, for display as part of a screen (a window) 
or as a full screen. The proxy server, in turn, In a step 33 
passes the GUI screens to the client. The GUI screens 
can originate at the ISP server 15, or at one or another 
I CP server. 

[0012] Then in a step 34, the client responds to a 
GUI screen originating at the I CP server 16; the 
response is communicated to the proxy server, which in 
turn translates it into a response originating from the cli- 
ent alias and directs it to the ICP server 16 indicated in 
the clients response. When the ICP server 16 receives 
the client response, apparently from the client alias, it 
responds in turn with another GUI screen. In a step 36, 
the proxy server 18 directs the response to the client 
computer 12. which displays the GUI screen response 
for the client. 

[0013] With these steps, a client is able to take 
advantage of any services offered over the Internet, pro- 
vided the services can be provided completely over the 
Internet If, however, the client wishes to order merchan- 
dise from the ICP, for the client to remain unknown to the 
ICP, there must be a "Ship To" address that does not 
connect the client with the merchandise. 
[0014] On the Internet today, an ICP server will 
sometimes attempt to set a so-cailed cookie in the RAM 
of a computer hosting a browser accessing the ICP's 
Web site. The ICP server expects to have the browser 
return the cookie according to a standard protocol. 
(See, for example, U.S. Pat. No. 5,774,670 to Montulli, 
hereby incorporated by reference.) In standing in place 
of a dient, to provide effective access to the Internet, 
the proxy must allow for the setting and retrieving of 
cookies but without revealing in a cookie the identity of 
the client. To do this, the proxy simply passes all incom- 
ing cookies to the client but processes the cookies com- 
ing from the client (provided by the client's browser 
based on the Web site the client wants to access), 
replacing all client identification data with corresponding 
alias data, when possible. (If the client furnishes a social 
security number or a credit or charge card number for a 
credit or charge card issued by other than the proxy or 
the proxy's agent, there is no corresponding alias infor- 
mation the proxy can u&e in replacement.) 
[0015] Referring now to Fig. 3, the preferred 
embodiment of the present invention is shown to include 
having the proxy make payments to an ICP, and accept 
merchandise from the ICP, on behalf of a client. Pay- 
ments to the ICP are made based on the purchasing 
power of the client's alias account Thus, In this embodi- 
ment, a client is able to take full advantage of services 
offered through the Internet, including ordering and 
receiving merchandise from an ICR 



[0016] As shown in Fig. 3, to take advantage of the 
present invention, a client and proxy agree on an alias 
for the client, and the client establishes with the proxy 
an alias account having some purchasing power. In 

5 addition, in the preferred embodiment, the client pro- 
vides Ship To information so that the proxy can receive 
merchandise on behalf of the client's alias, and redirect 
the merchandise to the client's Ship To address. Using 
an account manager (automated hardware and soft- 

10 ware system), the proxy then records all of this account 
information in an account for the client; the client's 
account information is recorded as a data store acces- 
sible by the account manager and also by the proxy 
server (automated hardware and software system). 

IS [0017] After creating an account with the proxy, a 
client accesses the Internet through the proxy server, by 
first connecting to the proxy server as explained above. 
The proxy server then makes initial access to the Inter- 
net, as the client's alias, and receives from the Internet 

20 a response to its initial access. This re^onse is a GUI 
screen, as explained above, enabling searching the 
Internet or asking for a connection to a particular Inter- 
net site. The proxy server provides this GUI screen to 
the client according to the protocol expected by the cli- 

25 ent's browser software. In the preferred embodiment, 
the client's browser is the same browser software the 
client would use to access the Internet directly, not 
through the proxy server. In another embodiment of the 
present invention, the client browser software is not 

30 Internet-capable, but specialty developed software for 
receiving GUI screens from the proxy server and com- 
municating back to the proxy server responses to the 
GUI screens, i.e., actions the client wishes to take on 
the Internet, and other communications, in general 

35 referred to as transaction items. 

[0018] Whether the client's browser is a generic 
Internet-capable browser or special proxy-communica- 
tion software, in response to the GUI screens communi- 
cated by the proxy server, the client uses the browser to 

40 express the transaction items for communication to the 
Internet by the proxy server. Transaction items directed 
to a particular ICP server result in the ICP providing a 
response to the alias. The proxy server, as the client 
alias, receives the ICP response and communicates it to 

45 the client browser (along with any cookies). 

[001 9] In the preferred embodiment, if by communi- 
cating transaction items to an ICP, a client has ordered 
merchandise from the ICP. the proxy server automati- 
cally refers to the client's alias account information, to 

50 determine whether there is sufficient purchasing power 
to pay for the merchandise. If not, the proxy server 
sends the client browser a notice of insufficient purchas- 
ing power, and does not communicate the order to the 
ICP server. 

55 [0020] If the client's purchasing power is sufficient, 
the proxy server guarantees payment to the ICP by 
sending a guarantee over the Internet to the ICP server. 
In turn, the ICP sends the merchandise and a bill to the 
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proxy in the name of the client's alias, because in this 
embodiment, the client has the proxy receive all mer- 
chandise the client orders, so as to remain anonymous. 
[0021] To provide these guarantees, the proxy 
server must do two things: first, recognize when the cli- 
ent is ordering merchandise anonymously; and second, 
determine how much the merchandise costs. To recog- 
nize when the client is ordering merchandise anony- 
mously, the proxy server, in the preferred embodiment, 
parses for ordering information the transaction items 
intended to be communicated to ICR's by the client. 
(This ordering information is often communicated 
through cookies.) In parsing for ordering information, 
the proxy merely examines the transaction items com- 
municated by the client for the alias account code pro- 
vided by the client in response to a request from an ICR 
for a credit card number. By using the alias account 
code, the client signals to the proxy that the client wants 
the proxy to order and receive merchandise on behalf of 
the client. 

[0022] To determine how much the merchandise 
costs, in the preferred embodiment, the proxy server 
examines recent transactions from the client and recent 
GUI screens from the ICR to whom the alias account 
code is directed. If the proxy server cannot automati- 
cally determine the cost of the merchandise by this 
examination, the proxy server will query the client for a 
cost. In another aspect of the present invention, the 
proxy server simply queries the client for a fee upon dis- 
covering that the alias account code has been used. 
The above may also be used to authorize release of 
funds from an account 

[0023] In the usual application, where the client 
computer is connected to the proxy server by a private 
telephone line, it is unlikely that another party will dis- 
cover the alias account code issued to the client. In this 
application, the alias account code is not usually 
encrypted. For a connection over the Internet, however, 
the alias account code is more vulnerable, and its 
encryption is recommended. The present invention, 
however, is not intended to be in any way limited in this 
regard. 

[0024] In another embodiment, instead of using the 
alias account code merely as a signal for the proxy to 
check for funds, the client in fact receives a credit card 
from the proxy, and the proxy extends credit to the cli- 
ent, up to some pre-determined credit limit. In this 
embodiment, the proxy usually knows the identity of the 
client throughout the client-proxy relationship. As noted 
above, in the preferred embodiment, where the client 
deposits funds with the proxy, the client can be unknown 
even to the proxy; the client simply never provides to the 
proxy actual identification. 

[0025] In another aspect of the present invention, 
the client may choose to order merchandise without 
using the alias account code, either as an actual credit 
card number (issued by the proxy) or as a code to the 
proxy. The client could use an ordinary credit card. 



revealing the client's Identity, or one or another form of 
digital cash payment. Using some forms of digital cash, 
and acting through the proxy of the present invention, 
would keep the client's identity unknown to the ICR 
5 [0026] In another form of this invention, the proxy 
would make direct electronic payment from the account 
it holds and thus provide this service as part of the pack- 
age. 

[0027J While the invention has been particularly 
10 shown and described with reference to a preferred 
embodiment, it would be understood by those skilled in 
the art that various changes in form and detail may be 
made therein without departing from the spirit and 
scope of the invention. 

15 

Claims 

1 . A system for enabling a client, using an alias, to 
access services over the Internet offered by an 

20 Internet content provider (ICR) operating an ICR 
server, the system comprising: 

a) a browser hosted by a computer operated by 
the client, for receiving graphical user interface 

25 (GUI) screens, and for communicating transac- 

tions indicated by the client, the transactions 
including information that allows the alias to be 
associated with the transactions; and 

b) a proxy server operated by a proxy, respon- 
30 sive to the transactions, for ensuring that each 

transaction is under the alias and for communi- 
cating the transactions to the ICR over the 
Internet, and further responsive to GUI screens 
directed to the alias, for providing the GUI 
35 screens to the browser. 

2. The system claimed in claim 1 , wherein the client 
uses a key to access service. 

40 3. The system claimed in claim 1. wherein the client 
receives from the proxy an alias account code 
associated with an alias account of the client with 
the proxy, and wherein the client uses the alias 
account code to purchase merchandise from the 

45 ICR when the client wants to remain anonymous; 
and further wherein the -proxy examines transac- 
tions communicated by the browser for the alias 
account code. 

50 4. The system claimed in claim 2, wherein upon find- 
ing that the client has used the alias account code 
in a transaction, the proxy server consults the alias 
account to determine whether the client has suffi- 
cient purchasing power to pay for the merchandise. 

55 and further wherein if the client is determined to 
have sufficient purchasing power to pay for the mer- 
chandise, the proxy server communicates a guar- 
antee of payment to the ICR for the merchandise. 
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The system claimed in claim 4 wherein the proxy ent according to instructions received from the cli- 

accepts merchandise ordered by the client under ent. 
the alias, and provides the merchandise to the cli- 
ent according to instructions received from the cli- 
ent. - 5 

A method for enabling a client, using an alias, to 
access services over the Internet, offered by an . 
Internet content provider (ICP) operating an ICP 
server, the method comprising the steps of: to 

a) having the client use a browser hosted by a 
computer; 

b) having the client receive with the browser 
graphical user interface (GUI) screens; is 

c) having the client communicate transactions 
with the browser in response to the GUI 
screens; 

d) having a proxy operate a proxy server; e) 
having the proxy server receive the transac- 20 
tions 

communicated by the client 

f) having the proxy server ensure that each 
transaction is under the alias and communicate 
the transactions to the ICP over the Internet to 25 
the ICP server; 

g) having the proxy server receive GUI screens 
from the ICP server and communicate to the 
browser any of the GUI screens directed to the 
atlas. 30 

The method claimed in claim 6 wherein the client 
receives from the proxy an alias account code for 
an alias account the client establishes with the 
proxy, and wherein the client uses the alias account 35 
code to purchase merchandise from the ICP when 
the client wants to remain anonymous; and further 
wherein the proxy examines transactions communi- 
cated by the browser for the alias account code. 

40 

The method claimed in claim 7, wherein the 
account code is a key that protects the account 
from multiple users of the account. 

The method claimed in claim 7 wherein upon find- 45 
ing that the client has used the alias account code 
in a transaction, the proxy server consults an 
account maintained by the proxy for the client to 
determine whether the client has sufficient pur- 
chasing power to pay for the merchandise, and fur- so 
ther wherein if the client is determined to have 
sufficient purchasing power to pay for the merchan- 
dise, the proxy server communicates a guarantee 
of payment to the ICP for the merchandise. 



55 



10. The method claimed in claim 9 wherein the proxy 
accepts merchandise ordered by the client under 
the alias, and provides the merchandise to the cli- 
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Client connects to proxy server and provides 
identification. 






Proxy server accesses Internet as client alias. 






Proxy server passes to client all GUI screens, 
received over Internet, directed to client alias. 
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Proxy server receives communication from 
client, and forwards it to the Internet under the 
client alias, for delivery to the ICP server 
. indicated in the communication. 



35 >^ 

ICP server responds to the alias 
communication, and Internet delivers the 
response to the proxy server. 



36>^ 

Proxy server forwards response to the client 
browser. 



Eig. 
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